Citiverse
  • Bug in the nodebb-plugin-link-preview plugin

    Bug Reports
    3 6 2

    M
    4
    0

    When I am in a chat between users, and send a link to a forum page.
    The link does not display the page but automatically redirects to login.
    All users who received the link have access to the category, but the category is hidden and not accessible to all forum users.
    I hope I understood.

  • baris@community.nodebb.orgB
    11
    0

    The link plugin is likely trying to load the category link as a non logged in user and simce it's private it doesn't render. @julian

  • julian@community.nodebb.orgJ
    37
    0

    @baris I think that's best case.

    Link preview accesses as guest and caches it so we wouldn't want to leak any info out accidentally.

  • M
    4
    0

    @baris Indeed, it seems that way, but it must go through identifying the capabilities of that user.

  • M
    4
    0

    @julian Perhaps it is possible to configure that after clicking the link and reaching the login/profile page, the plugin will automatically recognize the connection and redirect to the correct page.

  • julian@community.nodebb.orgJ
    37
    0

    @Moshe no that's not what I mean.

    If the plugin cached private, sensitive data, that is an information disclosure vulnerability.

    The plugin acting as a guest and not a logged in user is a feature, not a bug.


Citiverse è un progetto che si basa su NodeBB ed è federato! | Categorie federate | Chat | 📱 Installa web app o APK | 🧡 Donazioni | Privacy Policy

Il server utilizzato è quello di Webdock, in Danimarca. Se volete provarlo potete ottenere il 20% di sconto con questo link e noi riceveremo un aiuto sotto forma di credito da usare proprio per mantenere Citiverse.